JP7673607B2 - Service provision support device and program - Google Patents

Description

The present invention relates to a service provision support device and a program.

Traditionally, banks and other such institutions have provided so-called Internet banking services to customers via communication networks such as the Internet. In Internet banking services, a system has been disclosed in which identity verification is performed using a terminal held by the customer, such as a mobile terminal, by using, for example, an image of an identification document and a facial image of the customer's face to verify the identity of the customer. Then, in this system, if identity verification is successful, the customer is permitted to use the service (see Patent Document 1).

JP 2020-77420 A

In the system described in Patent Document 1, when a user uses a certain service, the user is required to verify his/her identity, thereby enabling the user to use the service in a highly reliable environment.
However, services that require identity verification are expected to include many more than just those provided by financial institutions, such as internet banking, and there are many different service providers providing these services. Therefore, users need to verify their identity every time they use a service provided by each service provider. When a user uses multiple services in succession within a short period of time, they have to verify their identity multiple times, which is cumbersome for the user.

The present invention aims to provide a service provision support device and program that improves user convenience.

The present invention solves the above problems by the following means. Note that, for ease of understanding, the following description will be given with reference symbols corresponding to the embodiments of the present invention, but the present invention is not limited to these. Furthermore, the configurations described with reference symbols may be modified as appropriate, and at least a portion of the configurations may be replaced with other configurations.

A first invention is a service provision support device (1) communicatively connected to a terminal (4) and each of business device (9) of one or more business operators that provide services to a user of the terminal, the service provision support device comprising: a validity time setting means (17) that sets a validity time when identity verification is successful through identity verification processing performed with the terminal; and an information providing means (19) that provides identity verification information used in the identity verification processing to the business device of the one or more business operators within the validity time range set by the validity time setting means.
A second invention is a service provision support device comprising an intermediation means (20) for intermediating processing related to a service performed between the service provider device (9) and the terminal (4) within the range of the validity time set by the validity time setting means (17) in the service provision support device (1) of the first invention.
A third invention is a service provision support device (1) of the first or second invention, further comprising an application receiving means (16) that receives a selection related to an application for one or more services from the terminal (4), and the information providing means (19) provides identity verification information used in the identity verification process to the business operator devices (9) of the one or more business operators related to the application for the one or more services accepted by the application receiving means, within the validity time range set by the validity time setting means (17).
A fourth invention is the service provision support device (1) of the third invention, wherein the validity time setting means (17) sets the validity time in accordance with a selection related to an application for the one or more services accepted by the application accepting means (16).
A fifth invention is a service provision support device according to any one of the first to fourth inventions, further comprising a time output means (18) for outputting information relating to the validity time set by the validity time setting means (17) to the terminal (4).
A sixth invention is a service provision support device (1) according to any one of the first to fifth inventions, further comprising a login authentication means (11) for receiving login information from the terminal (4) and performing authentication, and the information providing means (19) provides the identity verification information used in the identity verification process to the business operator device (9) within the validity time range set by the validity time setting means (17) only while the connection with the terminal is continued through authentication by the login authentication means.
A seventh invention is a service provision support device (1) according to any one of the first to sixth inventions, comprising: a confirmation information receiving means (14) that receives confirmation information from the terminal (4), the confirmation information including a document image obtained by photographing an identification document with a face photo and a facial image obtained by photographing the user's face; and an identity verification means (14) that performs the identity verification process using the confirmation information received by the confirmation information receiving means.
An eighth invention is a service provision support device (1) of the seventh invention, comprising: an image registration means (14) for registering at least a facial photo image among the document images and information obtained by processing by the identity verification means in a memory unit (34) when identity verification is successful by the identity verification means (14); a registration information matching means (14) for matching the facial image with the facial photo image stored in the memory unit when the confirmation information receiving means receives only a facial image obtained by photographing the user's face from the terminal (4); and an identity authentication means (14) for determining that identity verification has been successful when matching is successful by the registration information matching means.
The ninth invention is a program for causing a computer, which is a service provision support device (1) communicatively connected to a terminal (4) and each of business device (9) of one or more business operators that provide services to a user of the terminal, to function as a validity time setting means for setting a validity time when identity verification is successful through identity verification processing performed with the terminal, and as an information providing means for providing identity verification information used in the identity verification processing to the business device of the one or more business operators within the validity time set by the validity time setting means.

The present invention provides a service provision support device and program that improves user convenience.

1 is a diagram showing an overall configuration of a service delivery support system according to an embodiment of the present invention; FIG. 2 is a diagram illustrating functional blocks of a service delivery support server according to the embodiment. FIG. 4 is a diagram illustrating an example of a storage unit of the service delivery support server according to the embodiment. FIG. 2 is a diagram showing functional blocks of a user terminal according to the present embodiment. FIG. 11 is a diagram showing a display example on a user terminal according to the embodiment. FIG. 11 is a diagram showing a display example on a user terminal according to the embodiment. 10 is a flowchart showing a main process of the service delivery support server according to the embodiment; 10 is a flowchart showing a personal identification process of the service delivery support server according to the embodiment; FIG. 11 is a diagram showing a display example on a user terminal according to the embodiment. FIG. 11 is a diagram showing a display example on a user terminal according to the embodiment. 11 is a flowchart showing an image matching process of the service delivery support system according to the embodiment. FIG. 11 is a diagram showing a display example on a user terminal according to the embodiment. FIG. 11 is a diagram showing a display example on a user terminal according to the embodiment. FIG. 11 is a diagram showing a display example on a user terminal according to the embodiment. FIG. 11 is a diagram showing a display example on a user terminal according to the embodiment.

Below, a description will be given of an embodiment of the present invention with reference to the drawings. Note that this is merely an example, and the technical scope of the present invention is not limited to this example.

(Embodiment)
FIG. 1 is a diagram showing the overall configuration of a service delivery support system 100 according to this embodiment.
The service delivery support system 100 is a system in which a service delivery support server 1 (service delivery support device) performs identity verification of a user on behalf of each business operator when the user uses the service of each business operator. After the service delivery support server 1 has performed identity verification, the service delivery support system 100 provides each business operator with the identity verification result under predetermined conditions. This process eliminates the identity verification process that must be performed every time the user uses a service of each business operator. In other words, the service delivery support system 100 is a platform system that uses identity verification and personal information to reduce the user's workload related to identity verification and to perform processing with businesses in a reliable state.

The service provision support system 100 includes a service provision support server 1, a user terminal 4 (terminal), a biometric authentication server 6, a number authentication server 7, and an operator server 9 (operator device). The service provision support server 1, the biometric authentication server 6, the number authentication server 7, and the operator server 9 are communicatively connected via a communication network N. The user terminal 4 can be connected to the communication network N via a base station R.

The service delivery support server 1 is owned, for example, by a company that provides a platform that spans across the various businesses, and is different from each of the businesses. The service delivery support server 1 performs identity verification processing for users on behalf of each of the businesses. The service delivery support server 1 also provides each of the businesses with identity verification information, which is personal information of the user, acquired in the identity verification processing. The service delivery support server 1 is, for example, a Web server.
Here, the identity verification in this specification will be described. Identity verification refers to verification to prevent impersonation. For the identity verification process, for example, an identity verification document, which is an official certificate such as a driver's license or a My Number card, is used, and a facial photograph on the identity verification document is compared with a facial image (biometric information) of the user. Through this identity verification process, the service delivery support server 1 can guarantee that the user and the identity verification document are the same person, that is, that the user is the person on the identity verification document.

The user terminal 4 is a terminal used by a user who wishes to use a service provided by each operator. The user terminal 4 is, for example, a mobile phone that also has computer functions, such as a smartphone. The user terminal 4 may also be a tablet, a personal computer (PC), etc.

The biometric authentication server 6 is a server used to confirm identity using a facial image of a user acquired during identity verification processing and a facial photograph image (face photo image) included in a document image that is an image of an identity verification document. The biometric authentication server 6 verifies whether or not the two are the same person using, for example, a facial image matching program that calculates the degree of match between the facial image and the facial photograph image as a score. The biometric authentication server 6 includes a control unit, a memory unit, a communication interface unit, etc., which are not shown in the figure.

The number authentication server 7 is a server of an authentication authority used to verify the authenticity of a document image acquired from a user during identity verification processing. In this example, the identity identification information written on the identity verification document and the password are associated and registered in the number authentication server 7. If the identity verification document is a My Number card, the identity identification information is the My Number, and if the identity verification document is a driver's license, the identity identification information is the license number. The password is, for example, an eight-digit number determined by the user when the identity verification document is issued to the user.
The number authentication server 7 corresponds to a server of J-LIS (Japan Agency for Local Government Information Systems) if the identity verification document is a My Number Card, and corresponds to a server of a system such as the National Police Agency that manages information on driver's licenses if the identity verification document is a driver's license. As described above, the number authentication server 7 has an information DB that stores identity identification information and password information in association with each other. The number authentication server 7 also includes a control unit, a storage unit, a communication interface unit, etc., which are not shown in the figure.

The business operator server 9 is, for example, a server managed by each business operator. The business operator server 9 performs processing at each business operator. In the example of FIG. 1, the device managed by business operator A is described as business operator server 9A, and the device managed by business operator B is described as business operator server 9B, but this is just an example. Furthermore, when the business operator is not specified, it will be described simply as business operator server 9. The business operator server 9 includes a control unit, a memory unit, a communication interface unit, etc., which are not shown.

The base station R is a base station for wireless communication, and relays communication between the user terminal 4 and the service delivery support server 1 and the carrier server 9. The base station R is, for example, a base station for a wireless LAN (Local Area Network) or a base station for a mobile terminal communication network of a carrier.
The communication network N is a network between various servers or between various servers and the base station R, and is an Internet line, a mobile terminal communication network, or the like.

In the following explanation, the service provision support system 100 will be described as providing a comprehensive linkage service that enables a user to perform various procedures when moving all at once using the user terminal 4. The service provision support server 1 will be described as executing the functions of a platform for providing the comprehensive linkage service. Each business server 9 will be a server of each company, such as a financial institution such as a bank, an electric power company, a gas company, a waterworks bureau, or a telephone company, and will be described as executing the functions of various procedures (services) required when moving.

Next, the functional configuration of the service delivery support server 1 will be described.
FIG. 2 is a diagram showing functional blocks of the service delivery support server 1 according to this embodiment.
FIG. 3 is a diagram illustrating an example of the storage unit 30 of the service delivery support server 1 according to this embodiment.

The service delivery support server 1 shown in FIG. 2 includes a control unit 10 , a storage unit 30 , and a communication interface unit 39 .
The control unit 10 is a CPU (Central Processing Unit) that controls the entire service provision support server 1. The control unit 10 appropriately reads and executes an operating system (OS) and various application programs stored in the storage unit 30, thereby cooperating with the above-mentioned hardware to realize various functions.
The control unit 10 includes a login authentication unit 11 (login authentication means) and a service support unit 13 .

The login authentication unit 11 is an authentication process performed when a user uses the collective cooperation service. The login authentication unit 11 performs authentication by comparing login information received from the user terminal 4 with information stored in the login information storage unit 32.
The service support unit 13 performs processing related to the use of the collective cooperation service.
The service support unit 13 includes an identity verification processing unit 14 (confirmation information receiving means, identity verification means, image registration means, registered information matching means, identity authentication means), a basic information registration unit 15, an application acceptance unit 16 (application acceptance means), a valid time setting unit 17 (valid time setting means), a time output unit 18 (time output means), an information provision unit 19 (information provision means), and an intermediation processing unit 20 (intermediation means).

The identity verification processing unit 14 performs identity verification processing as a preliminary step of providing the collective cooperation service to the user terminal 4. More specifically, the identity verification processing unit 14 receives, from the user terminal 4, verification information including a document image, which is an image of the identity verification document photographed by the user, an image of the user's face, personal information input by the user, and password information related to the user's identity verification document.
In addition, the identity verification processing unit 14 transmits the face photograph image included in the document image and the user's own face image to the biometric authentication server 6 to request a match to confirm whether or not the face photograph image included in the received document image and the user's own face image are the same person. Furthermore, in order to confirm whether or not the user of the identity verification document is an actual person, the identity verification processing unit 14 transmits identity identification information and password information to the number authentication server 7 to request authentication. Here, the identity identification information can be obtained from the document image, as will be described later.

The identity verification processing unit 14 determines that identity verification has been successful when it can confirm that the person is the same person by matching the image using the biometric authentication server 6 and can confirm the person's existence using the number authentication server 7.
Then, when identity verification is successful, the identity verification processing unit 14 registers the image of the face photo contained in the document image, the expiration date of the identity verification document, and the information obtained by the processing of the identity verification processing unit 14 in the identity verification information memory unit 34 (memory unit).

The basic information registration unit 15 receives personal information of the user, etc., required for using the collective cooperation service from the user terminal 4 and registers it in the basic information storage unit 33 .
The application receiving unit 16 receives applications from the user terminal 4 to each business operator who performs various procedures.
The valid time setting unit 17 sets a valid time when identity verification has been completed by the identity verification processing unit 14. Here, the valid time refers to the time during which information used in identity verification processing when performing various procedures (hereinafter also referred to as identity verification information) can be provided to the business server 9. The valid time includes the operation time required to perform various procedures, and is specifically a time in minutes, for example, five minutes.

The valid time setting unit 17 may set a different valid time for each business that performs various procedures. The valid time setting unit 17 may set the valid time according to, for example, the number of input items and the method of specifying the input items (selection method, direct character input method, etc.). The valid time setting unit 17 may set a longer valid time for a business that has many input items than for a business that has few input items. Furthermore, the valid time setting unit 17 may set the valid time according to the number of business operators that perform various procedures. For example, the valid time setting unit 17 may set the valid time to a time obtained by multiplying the number of business operators that perform various procedures by the unit valid time per business operator. Furthermore, the valid time setting unit 17 may set the valid time to be extended each time the application acceptance unit 16 accepts an application from a business operator, so that time is secured for enabling the provision of identity verification information even if the number of business operators that apply increases.

The time output unit 18 outputs the valid time set by the valid time setting unit 17 to the user terminal 4 .
The information providing unit 19 provides the identity verification information used in the identity verification process to the business operator server 9 of the business that performs the procedures accepted by the application accepting unit 16, within the valid time period set by the valid time setting unit 17. Note that the information providing unit 19 provides the identity verification information to the business operator server 9 only when a session has been established by the login authentication by the login authenticating unit 11, that is, when the connection with the user terminal 4 is ongoing.
The intermediation processing unit 20 mediates the processing related to various procedures performed between the user terminal 4 and the business server 9 within the valid time range set by the valid time setting unit 17 .

The storage unit 30 is a storage area such as a hard disk, a semiconductor memory device, etc. for storing programs, data, etc. required for the control unit 10 to execute various processes.
The storage unit 30 includes a program storage unit 31 , a login information storage unit 32 , a basic information storage unit 33 , a personal identification information storage unit 34 , and a business operator information storage unit 35 .
The program storage unit 31 is a storage area for storing various programs. The program storage unit 31 stores, for example, programs for performing various functions executed by the control unit 10 of the service delivery support server 1. The programs for performing various functions executed by the control unit 10 of the service delivery support server 1 may be configured with multiple programs for each function.

The login information storage unit 32 is a storage area that stores login information of the user of the user terminal 4. An example of the login information storage unit 32 is shown in FIG.
The login information storage unit 32 shown in FIG. 3A stores a user ID (Identification), a password, and a status in association with each other.
The user ID is identification information that uniquely identifies the user of the user terminal 4 .
The password is a password set by the user.
The status indicates whether or not the user is logged in.
The user ID and password may be general ones that are set by the user when using the collective collaboration service.

The basic information storage unit 33 is a storage area that stores personal information and the like of the user of the user terminal 4. An example of the basic information storage unit 33 is shown in FIG.
The basic information storage unit 33 shown in FIG. 3B stores a user ID, a name, an address before moving, an address after moving, etc. in association with each other.
The user ID is identification information for identifying a user.
The name is the name of the user.
The address before moving is the address of the user before moving.
The new address is the address of the user after moving.
Although not shown, the basic information storage unit 33 further stores information received from the user terminal 4, such as information regarding the delivery address of invoices and receipts.

The personal identification information storage unit 34 is a storage area for storing data obtained from a personal identification document. An example of the personal identification information storage unit 34 is shown in FIG.
The personal identification information storage unit 34 shown in FIG. 3C stores a user ID, a document type, a name, an address, image data, etc. in association with each other.
The user ID is identification information for identifying a user.
The document type is the type of identity verification document, and indicates whether it is a driver's license or a My Number card.
The name is the name that appears on the identity document.
The address is the address shown on the identity document.
The image data is a facial photograph image of the document image.
Although not shown, the personal identification information storage unit 34 further stores other information such as personal identification information that can be obtained from the personal identification document.

The business information storage unit 35 is a storage area for storing information related to each business. An example of the business information storage unit 35 is shown in FIG.
The business information storage unit 35 shown in FIG. 3D stores categories and business names etc. in association with each other using a business ID as a key.
The business operator ID is identification information for uniquely identifying the business operator of the business operator server 9 .
The category indicates the type of business (category) of the business operator, such as electricity, gas, water, banking, etc.
The business name is the name of the business.
The business operator information storage unit 35 may store various other information related to the business operator.
The communication interface unit 39 is an interface for communicating with various servers such as the business server 9 and the user terminal 4 via the communication network N.

There is no limit to the number of pieces of hardware that make up the service provision support server 1. It may be configured with one or more pieces of hardware as needed. The hardware of the service provision support server 1 may also be configured to include various servers such as a web server, a DB (database) server, and an application server as needed, and may be configured with a single server or with separate servers. Furthermore, the service provision support server 1 may be, for example, a cloud.

Next, the functional configuration of the user terminal 4 will be described.
FIG. 4 is a diagram showing functional blocks of the user terminal 4 according to this embodiment.
As shown in FIG. 4, the user terminal 4 includes a control unit 40, a storage unit 50, a camera 54, a touch panel display 55, a speaker 57, and a communication interface unit 59.

The control unit 40 is a CPU that controls the entire user terminal 4. The control unit 40 appropriately reads and executes the OS and various application programs stored in the storage unit 50, thereby cooperating with the above-mentioned hardware and executing various functions.
The control unit 40 includes an initiation processing unit 41 and a service application unit 45 .
The start processing unit 41 performs processing when the user terminal 4 accesses (connects) the service delivery support server 1. The start processing unit 41 includes a service list output unit 42 and a login input processing unit 43.

The service list output unit 42 outputs a list of procedures that can be performed using the integrated collaboration service provided by the service delivery support server 1 to the user terminal 4. This allows the user to understand what procedures can be performed using the integrated collaboration service, and encourages the user to use the integrated collaboration service.
The login input processor 43 performs processing related to login authentication. If login information has not been registered, the login input processor 43 accepts input related to login registration processing and transmits it to the service delivery support server 1. If login information has been registered, the login input processor 43 accepts input of a login ID and password and transmits it to the service delivery support server 1.

The service application unit 45 performs processing related to applications for use of the collective cooperation service. The service application unit 45 includes an identity verification input processing unit 46, a basic information input processing unit 47, and a procedure input processing unit 48.
The identity verification input processing unit 46 outputs a page (screen) for identity verification received from the service provision support server 1, and performs processing to transmit various information required for identity verification entered by the user on the page to the service provision support server 1 in accordance with the user's instructions.
The basic information input processing unit 47 outputs a page for inputting the basic information received from the service provision support server 1, and performs processing to transmit the basic information inputted by the user onto the page to the service provision support server 1 in accordance with the user's instructions.
The procedure input processor 48 outputs the page for the business received from the service delivery support server 1, and transmits the information input by the user onto the page to the service delivery support server 1 in accordance with the user's instructions.

The storage unit 50 is a storage area such as a semiconductor memory element for storing programs, data, etc. required for the control unit 40 to execute various processes.
The storage unit 50 includes a program storage unit 51 .
The program storage unit 51 is a storage area that stores various application programs (hereinafter, application programs are referred to as applications, apps, programs, etc.). The program storage unit 51 stores programs for performing various functions executed by the control unit 40 of the user terminal 4. Here, the programs stored in the program storage unit 51 include, for example, a web browser.

The camera 54 is an imaging device. The camera 54 has an in-camera 54a and an out-camera 54b. The in-camera 54a is a camera provided on the touch panel display 55 side of the user terminal 4. The out-camera 54b is a camera provided on the back side of the user terminal 4.
The touch panel display 55 functions as a display unit constituted by a liquid crystal panel or the like, and also functions as an input unit for inputting various operations using a user's finger.
The speaker 57 functions as an audio output unit.
The communication interface unit 59 is an interface for communicating with various servers via the communication network N, and serves as a transmitter and a receiver.

Here, a computer refers to an information processing device equipped with a control unit, a storage device, etc., and the service provision support server 1, the user terminal 4, the biometric authentication server 6, the number authentication server 7, and the business server 9 are each information processing devices equipped with a control unit, a storage device, etc., and are included in the concept of a computer.

Next, the process of the service delivery support system 100 will be described.
5 and 6 are diagrams showing examples of displays on the user terminal 4 according to this embodiment.
A user considering using the collective cooperation service provided by the service delivery support system 100 first inputs the URL of the service delivery support server 1 in the user terminal 4 to connect to the service delivery support server 1. The control unit 10 of the service delivery support server 1 transmits a page corresponding to the URL to the user terminal 4, and the control unit 40 (service list output unit 42) of the user terminal 4 outputs a service list page 60, exemplified in FIGS. 5(A) and 5(B), to the touch panel display 55.
The service list page 60 is a page that displays a list of procedures that can be performed in the integrated linkage service, categorized by category. When the user looks at the service list page 60 and wishes to use the integrated linkage service, the user selects button 60a or 60b. Button 60a is to be selected when using the integrated linkage service for the first time. Button 60b is to be selected when the user has already registered for the integrated linkage service.

When the user selects button 60a on the service list page 60 in FIG. 5(B), the control unit 10 of the service provision support server 1 transmits a login registration page (not shown) to the user terminal 4 prior to membership registration. To this end, the control unit 40 (login input processing unit 43) of the user terminal 4 inputs a user ID and password, etc., according to the page and transmits them to the service provision support server 1. The control unit 10 (login authentication unit 11) of the service provision support server 1 registers the received user ID and password in the login information storage unit 32. After that, the control unit 10 of the service provision support server 1 transmits the next page to be transitioned to, so the control unit 40 of the user terminal 4 outputs page 61, exemplified in FIG. 6(A), to the touch panel display 55. Page 61 is a page that prompts the user to register basic information, and includes a button 61a for proceeding with the process.

On the other hand, if the user selects button 60b on the service list page 60 in FIG. 5(B), the control unit 10 of the service provision support server 1 transmits a login input page (not shown) to the user terminal 4. To this end, the control unit 40 (login input processing unit 43) of the user terminal 4 inputs the user ID, password, etc. according to the page and transmits it to the service provision support server 1. The control unit 10 (login authentication unit 11) of the service provision support server 1 refers to the login information storage unit 32 and performs authentication based on the received user ID and password. If the authentication is successful, the control unit 10 transmits the next page to be transitioned to, and the control unit 40 of the user terminal 4 outputs page 62, exemplified in FIG. 6(B), to the touch panel display 55. Page 62 is the previous page for identity verification, and includes a button 62a for proceeding with the process.

Next, the process performed by the service support unit 13 of the service delivery support server 1 will be described.
FIG. 7 is a flow chart showing the main process of the service delivery support server 1 according to this embodiment.
FIG. 8 is a flowchart showing the identity verification process of the service delivery support server 1 according to this embodiment.
9 and 10 are diagrams showing examples of displays on the user terminal 4 according to this embodiment.
FIG. 11 is a flowchart showing the image matching process of the service delivery support system 100 according to this embodiment.
12 to 15 are diagrams showing examples of displays on the user terminal 4 according to this embodiment.

In the service delivery support system 100, the main process is executed when the service delivery support server 1 and the user terminal 4 are connected and a session is established. Therefore, when the session between the service delivery support server 1 and the user terminal 4 is disconnected, the main process is forcibly terminated.
When a button 61a is selected on page 61 in Fig. 6 (A), or when a button 62a is selected on page 62 in Fig. 6 (B), a processing request is sent from the user terminal 4 to the service delivery support server 1. In this way, in step S (hereinafter, "step S" will be simply referred to as "S") 11 in Fig. 7, the control unit 10 of the service delivery support server 1 receives the processing request from the user terminal 4.
In S12, the control unit 10 (personal identification processing unit 14) performs personal identification processing.

Here, the identity verification process will be described with reference to FIG.
In S31 of FIG. 8, the control unit 10 transmits a selection page for the identification document to the user terminal 4. In this way, the control unit 40 of the user terminal 4 outputs a selection page 70 for the identification document, as exemplified in FIG. 9(A), to the touch panel display 55. This selection page 70 is a screen for selecting either a My Number card or a driver's license as the identification document. In the example of FIG. 9(A), the user has selected the selection area 70a for the driver's license. When selected by the user, a check is added to the selection area 70a indicating that the selection area 70a has been selected. In addition, a button 70b for transitioning to the next screen is displayed selectably.

When button 60b is selected on selection page 70 in FIG. 9 (A), in S32 in FIG. 8, the control unit 40 (identification input processing unit 46) of the user terminal 4 accepts the selection of an identification document and transmits information related to the selected document to the service provision support server 1.

When the control unit 10 of the service provision support server 1 receives information related to the selected document, in S33, it transmits a document capture page to the user terminal 4. The control unit 40 of the user terminal 4 outputs a document capture page 71 for capturing an image of the identification document, as shown in FIG. 9(B) as an example, to the touch panel display 55 and activates the outer camera 54b. The example of FIG. 9(B) shows that, with the document capture page 71 displayed, a photo of the user's driver's license is about to be taken.

The user adjusts the position of the user terminal 4 so that the driver's license fits within the frame of the document capture page 71. Then, when the user touches (selects) button 71a on the document capture page 71, which is the shutter button, in S34 of FIG. 8, the control unit 40 (identification input processing unit 46) of the user terminal 4 controls the outer camera 54b to capture an image of the driver's license (identification document) and transmits the obtained image of the driver's license (document image) to the service provision support server 1.

When the control unit 10 of the service provision support server 1 receives the image of the driver's license, in S35 it performs image processing to read the image of the driver's license and extract text. The control unit 10 then transmits an information input page including the extracted text to the user terminal 4. The information input page is a page that allows the user to confirm the text of each item obtained from the driver's license, such as name, date of birth, address, license number, etc., and input the necessary information. The control unit 40 of the user terminal 4 outputs the information input page 72 shown in FIG. 10(A) to the touch panel display 55. In the example of FIG. 10(A), input of a name is shown, and the characters read from the driver's license and confirmed by the user are displayed in a manner that makes them clear.

The user uses the information input page 72 to input information about himself/herself. The information input by the user includes, for example, a password. Then, when the user selects a send button (not shown), in S36 of FIG. 8, the control unit 40 (personal identification input processing unit 46) of the user terminal 4 sends additional information, including the information input on the information input page 72, to the service provision support server 1.

When the control unit 10 of the service provision support server 1 receives the additional information, in S37, it transmits a face capture page for capturing a face image of the user to the user terminal 4. The control unit 40 of the user terminal 4 outputs a face capture page 73, as shown in FIG. 10(B) as an example, to the touch panel display 55 and activates the in-camera 54a.

While checking the touch panel display 55, the user aligns the position of their face with the face frame 73b in the through area 73a. Then, when the user touches (selects) the button 73c on the face capture page 73, which is the shutter button, in S38 of FIG. 8, the control unit 40 (personal identification input processing unit 46) of the user terminal 4 controls the in-camera 54a to capture an image of the subject's face and transmits the obtained face image to the service provision support server 1.

The service provision support server 1 may automatically acquire the image without the user operating the shutter button. In this case, the service provision support server 1 may receive image data from the in-camera 54a from the user terminal 4, and the control unit 10 of the service provision support server 1 may detect the position of the eyes from the face, detect blinking, and automatically acquire the image after the blinking is detected.

When the control unit 10 of the service delivery support server 1 receives the face image, the control unit 10 (personal identification processing unit 14) performs image matching processing in S39.
Here, the image matching process will be described with reference to FIG.
In S51 of Figure 11, the control unit 10 of the service provision support server 1 extracts an image of the facial photograph included in the driver's license image, and transmits the facial image received from the user terminal 4 and the extracted facial photograph image to the biometric authentication server 6.
When the biometric authentication server 6 receives the face image and the face photograph image, in S52, the control unit of the biometric authentication server 6 compares the received images. For example, the control unit of the biometric authentication server 6 performs image matching processing using a face image matching program that converts the degree of match of the images into a score, and calculates the degree of match between the face image and the face photograph image as a score.
The control unit of the biometric authentication server 6 then transmits the calculated score to the service delivery support server 1 as a result of identity, and ends this process.

In S<b>53 , the control unit 10 of the service delivery support server 1 transmits the user identification information and password included in the additional information received from the user terminal 4 to the number authentication server 7 .
When the number authentication server 7 receives the personal identification information and the password, in S54, the control unit of the number authentication server 7 checks the existence of the received information. More specifically, it checks whether the received information combination is registered in an information DB (not shown) owned by the number authentication server 7 to check whether the information is actually present. The control unit of the number authentication server 7 then transmits the check result to the service delivery support server 1 and ends this process.

In S55, the control unit 10 of the service provision support server 1 judges whether or not the existence and identity of the same person have been confirmed. For example, if the score received from the biometric authentication server 6 is equal to or greater than a predetermined value and the confirmation result received from the number authentication server 7 is indicative of an actual existence, the control unit 10 judges that the existence and identity of the same person have been confirmed. Here, the score received from the biometric authentication server 6 is expressed, for example, by a numerical value ranging from 0 to 100, with a higher numerical value indicating a higher degree of match. For example, if the score is equal to or greater than a predetermined value, the control unit 10 judges that the two are the same person. On the other hand, if either the existence or identity of the same person has not been confirmed, the control unit 10 judges that the existence and identity of the same person have not been confirmed.

If the control unit 10 is able to confirm the existence and identity of the person (S55: YES), the control unit 10 proceeds to S56. On the other hand, if the control unit 10 is unable to confirm the existence and identity of the person (S55: NO), the control unit 10 proceeds to S57.
If the score received from the biometric authentication server 6 is less than a predetermined value, the process of S53 may not be performed, and the process of S55 may be performed after receiving the process result of S52.
Furthermore, the order of the process of S51 and the process of S53 is not limited to this, and the process of S53 may be performed before the process of S51.
In S56, the control unit 10 determines that the identity of the user has been verified, and the process proceeds to S40 in FIG.
On the other hand, in S57, the control unit 10 determines that identity verification has not been successful, and moves the process to S40 in FIG.

In S40 of Fig. 8, the control unit 10 (identification processing unit 14) judges whether or not identity verification has been completed. If identity verification has been completed (S40: YES), the control unit 10 moves the process to S41. On the other hand, if identity verification has not been completed (S40: NO), the control unit 10 ends this process. If identity verification has not been completed, the control unit 10 transmits a page to the user terminal 4 indicating that identity verification has not been completed. In this way, the control unit 40 of the user terminal 4 outputs a page to the touch panel display 55 indicating that identity verification has not been completed, so that the user can take action such as redoing the identity verification process.
In S41, the control unit 10 stores the personal identification information including the images obtained in the series of personal identification processes in the personal identification information storage unit 34. Thereafter, the control unit 10 shifts the process to S13 in FIG.
The process order for identity verification using a series of pages described with reference to FIG. 8 is merely an example, and for example, the processes prior to the image matching process (S39) may be changed.

In S13 of FIG. 7, the control unit 10 determines whether or not the user has registered as a member. The control unit 10 may determine whether or not the user has registered as a member, for example, based on whether or not the basic information storage unit 33 contains user information. The control unit 10 may also determine whether or not the user has registered as a member based on whether the page of FIG. 6 (A) or FIG. 6 (B) has been output to the user terminal 4. If the user has registered as a member (S13: YES), the control unit 10 moves the process to S15. On the other hand, if the user has not registered as a member (S13: NO), the control unit 10 moves the process to S14.

In S14, the control unit 10 (basic information registration unit 15) performs basic information registration processing. Specifically, the control unit 10 transmits a page 63 illustrated in FIG. 12(A) and a page 64 illustrated in FIG. 12(B) to the user terminal 4 in order. The user inputs corresponding information into each item included in the page 63 and the page 64, and selects the buttons 63a and 64a corresponding to the page 63 and the page 64. In this manner, the control unit 40 (basic information input processing unit 47) of the user terminal 4 transmits the input information to the service delivery support server 1. Here, the page 63 illustrated in FIG. 12(A) allows the user to input information about the (prospective) contractor. If the (prospective) contractor is the same as the user in the identity verification process, the user may input, for example, "self" in relation to the applicant, and the control unit 40 of the user terminal 4 transmits the information to the service delivery support server 1, and the service delivery support server 1 may update the page 63 with identity verification information input into each item and transmit it to the user terminal 4. This can reduce the workload of the user in terms of input.
The control unit 10 (basic information registration unit 15) of the service delivery support server 1 registers the received basic information in the basic information storage unit 33. When the basic information is registered by the basic information registration process in S14 of Fig. 7, the control unit 10 of the service delivery support server 1 transmits a registration result page to the user terminal 4, and a page 65 shown in Fig. 13(A) is output to the user terminal 4.

7, the control unit 10 (validity time setting unit 17) sets the validity time. Then, the control unit 10 subtracts the elapsed time from the set validity time to calculate the remaining time.
In S<b>16 , the control unit 10 (service support unit 13 ) transmits the application page to the user terminal 4 .
For example, when a user selects a tab 65a on page 65 in FIG. 13A, the control unit 10 of the service delivery support server 1 transmits an application page 66, as shown in FIG.
In addition, if the basic information has already been registered, when button 62a is selected on page 62 shown in FIG. 6 (B) and the service provision support server 1 performs identity verification processing, the control unit 10 of the service provision support server 1 sends an application page 66 shown in FIG. 13 (B) to the user terminal 4.

When the user selects button 66a on application page 66 in FIG. 13(B), a business list page (not shown) is output to the user terminal 4. Then, when the user selects one or more businesses from that page, the business list page switches to application page 66, and application areas 66b, 66c, etc. corresponding to the selected businesses are added to application page 66.

In S17 of FIG. 7, the control unit 10 (service support unit 13) determines whether the remaining valid time has reached 0 (zero). If the remaining time has reached 0 (S17: YES), the control unit 10 moves the process to S21. On the other hand, if the remaining time has not reached 0 (S17: NO), the control unit 10 moves the process to S18.

In S18, the control unit 10 (application acceptance unit 16) judges whether or not an application has been accepted for each business that performs various procedures. In the above-mentioned FIG. 13(B), when the user selects the application area 66b, etc., the control unit 10 judges that the application has been accepted. If the application has been accepted (S18: YES), the control unit 10 transfers the process to S19. On the other hand, if the application has not been accepted (S18: NO), the control unit 10 transfers the process to S16.
In S19, the control unit 10 (the time output unit 18, the information providing unit 19, and the intermediation processing unit 20) performs application processing.

Specifically, the control unit 10 transmits a page 67 shown in Fig. 14(A) to the user terminal 4. The page 67 includes a time field 67a and an input field 67b. The time field 67a is an area for outputting a character string including the remaining time until the page 67 is output. The input field 67b is an area for outputting the page of the business server 9 to which the application has been made. Here, the control unit 10 (intermediation processing unit 20) of the service delivery support server 1 acts as an intermediary between the business server 9 and the user terminal 4.
The user inputs information into the input area 67b and selects a send button (not shown), causing the control unit 10 of the service delivery support server 1 to receive the input information from the user terminal 4. The control unit 10 of the service delivery support server 1 then transmits the received input information and the user's identity verification information to the business entity server 9. In the business entity server 9, the control unit processes the application and transmits result information to the service delivery support server 1. The control unit 10 of the service delivery support server 1 receives the result information from the business entity server 9 and transmits a result page to the user terminal 4. In this way, the user terminal 4 outputs, for example, a result page 68 as shown in FIG. 14(B) to the touch panel display 55.

In S20 of FIG. 7, the control unit 10 of the service provision support server 1 judges whether or not to end the main process. For example, when the "Logout" button 68a on the result page 68 illustrated in FIG. 14(B) is selected, the control unit 10 judges to end the main process. If the main process is to be ended (S20: YES), the control unit 10 ends this process. On the other hand, if the control unit 10 does not want to end the main process (S20: NO), the control unit 10 moves the process to S16. The case where the main process is not to be ended refers to the case where the user selects the button 68b on the result page 68. In this case, the control unit 10 of the service provision support server 1 transmits the application page 66 illustrated in FIG. 15(A) to the user terminal 4. The application page 66 in FIG. 15(A) indicates by shading that the application area 66b has been applied for.

On the other hand, in S21 of Fig. 7, the control unit 10 transmits a page to the user terminal 4 notifying the user that the time has expired. In the user terminal 4, for example, a page 69 illustrated in Fig. 15(B) is output to the touch panel display 55. If the user wishes to continue the application procedure, the user can continue the procedure by selecting a button 69a on the page 69.
In S22, the control unit 10 judges whether or not the continuation of the procedure has been accepted. If the continuation of the procedure has been accepted (S22: YES), the control unit 10 shifts the process to S12 and performs the identity verification process again. On the other hand, if the continuation of the procedure has not been accepted (S22: NO), the control unit 10 ends this process.

Even during the application process of S19 in FIG. 7, the control unit 10 constantly checks the remaining validity period, and when the remaining period reaches 0, the control unit 10 moves the process to S21.

(Regarding effective time settings)
Regarding the setting of the effective time, in the above description, it has been explained that the effective time is set in S15, but various variations are possible.
(Example 1) After identity verification processing, the validity period is set.
In the above explanation, when a member is not registered, the validity period is set after registering basic information. However, if it takes a long time to register basic information, the time that has elapsed since the identity verification process is performed will be long, and it is considered that reliability will decrease. Therefore, the validity period may be set before registering basic information. For example, when basic information is registered, the validity period may be set longer than when basic information is not registered, taking into account the time it takes to input the basic information.

(Example 2) When processing an application, the validity period is extended.
In the above explanation, the specific time when the valid time is set is not explained. For example, when processing an application, the valid time may be extended taking into consideration the time related to the application. The extension time may be a predetermined time for one application. The extension time may be different for each business operator, and a business operator with many input items may set the valid time longer than a business operator with few input items. Furthermore, the extension time may be set according to the number of input items and the method of specifying the input items (e.g., selection method, direct character input method, etc.).

(Embodiment 3) The application is selected in advance and the validity period is set.
When the application page 66 (see FIG. 13(B)) is output, the user may be prompted to select all businesses to which the application will be made, and the valid time may be set. In this case, for example, the valid time may be set to a time obtained by multiplying a predetermined valid time by the number of selected businesses. The timing for prompting the user to select all businesses to which the application will be made may also be when the service list page 60 (see FIG. 5(A) and FIG. 5(B)) is output.

As described above, according to this embodiment, the service delivery support system 100 has the following advantages.
(1) When the service provision support server 1 has succeeded in verifying the identity of a user through the identity verification process performed with the user terminal 4, the service provision support server 1 sets a validity period and provides the identity verification information used in the identity verification process to the business server 9 of one or more business operators within the validity period.
This eliminates the need to perform identity verification processing for each application to a business operator, improving user convenience. Also, business operators do not need to perform identity verification processing on their own, and can conveniently receive identity verification information. Furthermore, a validity period is set and identity verification processing is restricted so as not to be performed within the validity period, realizing a new mechanism that can guarantee the reliability of identity verification.

(2) The service delivery support server 1 mediates the processing of various procedures between the business server 9 and the user terminal 4 during the valid time period.
Therefore, the service delivery support server 1 can act as a platform for services such as integrated collaboration services, which eliminates the need for businesses to build their own systems and allows businesses to easily conduct business.

(3) In response to accepting a selection related to an application for one or more procedures from the user terminal 4, the service provision support server 1 provides the identity verification information used in the identity verification process to the business server 9 of one or more businesses related to the accepted application for the one or more procedures, within the set validity period.
Therefore, since personal identification information can be provided to one or more business operators, a system can be provided that eliminates the need to perform personal identification individually for various procedures at each business operator.

(4) The service delivery support server 1 sets a validity period in accordance with a selection made in relation to an application for one or more procedures received from the user terminal 4.
Therefore, the validity period can be set according to the application selection.
(5) The service delivery support server 1 outputs information about the validity period to the user terminal 4.
This allows the user to clearly see the time required to complete the procedures. The user can then understand that he or she must complete the procedures within the time limit shown. As a result, the user can carry out the work while checking the remaining valid time on the display screen of the user terminal 4.

(6) The service provision support server 1 receives login information from the user terminal 4, performs authentication, and provides the identity verification information used in the identity verification process to the business server 9 within the set validity period only while the connection with the user terminal 4 continues as a result of authentication. Therefore, since it is assumed that the login has been authenticated, security can be guaranteed.

(7) The service provision support server 1 receives confirmation information from the user terminal 4, the confirmation information including a document image obtained by photographing an identification document with a face photo and a facial image obtained by photographing the user's face, and performs identity verification processing using the received confirmation information.
This makes it possible to confirm the identity of the person in question and prevent impersonation.

Although the embodiments of the present invention have been described above, the present invention is not limited to the above-mentioned embodiments. Furthermore, the effects described in the embodiments are merely a list of the most favorable effects resulting from the present invention, and the effects of the present invention are not limited to those described in the embodiments. Note that the above-mentioned embodiments and the modified forms described below can be used in appropriate combinations, but detailed explanations will be omitted.

(Modifications)
(1) In the present embodiment, the personal identification information is provided to the business entity server 9 within the valid time, and when the valid time has elapsed, the personal identification process is performed again. However, the present invention is not limited to this. For example, the re-identification process may be simplified on the condition that the login authentication is performed and a session is established between the service delivery support server and the user terminal. Specifically, some processes such as photographing the personal identification document may be omitted, and the personal identification information stored in the personal identification process may be used in the re-identification process. After the user terminal photographs the user's face image, the user terminal may again transmit only the photographed image to the service delivery support server, so that the registration information matching means of the service delivery support server may compare the image with the image used in the personal identification process before this process, which is already stored in the personal identification information storage unit, and the personal authentication means of the service delivery support server may determine that the personal identification process has been performed if the comparison is successful.
This allows identity verification to be performed in a simple manner under conditions that guarantee a certain degree of reliability, that is, that login authentication is in progress, thereby further improving user convenience.

(2) In the present embodiment, the validity period is output on a page, but the present invention is not limited to this. For example, a sound notifying the validity period may be output from a speaker of the user terminal.
Furthermore, the output of the validity period to the page has been described taking the set validity period as an example, but for example, the remaining time may be output to the page each time the page is updated (refreshed).

(3) In this embodiment, an example has been described in which a comprehensive collaboration service is provided as a platform for various procedures carried out by each business operator, but the present invention is not limited to this. Any other service may be used as long as it requires processing for multiple businesses at once and identity verification is required.

(4) In this embodiment, the processing of the user terminal using a web browser has been described as an example, but the present invention is not limited to this. An app that realizes the same functions as those performed by the web browser may be stored in the user terminal, and the app may perform the processing. In this case, the user terminal can reduce communication with the service provision support server compared to when a web browser is used. In addition, the remaining valid time can be displayed in real time by the app.

(5) In this embodiment, in addition to matching face images, a password related to an identification document is received from a user terminal and a request for authentication is made to a number authentication server. However, this is not limited to this. If matching face images confirms that the person is the same, it may be determined that the identity has been confirmed. However, the reliability of the identity confirmation can be further improved by performing authentication using a password. Note that when using a password for authentication, it is desirable to also check the expiration date of the identification document.

LIST OF SYMBOLS 1 Service provision support server 4 User terminal 6 Biometric authentication server 7 Number authentication server 9, 9A, 9B Business server 10, 40 Control unit 11 Login authentication unit 13 Service support unit 14 Personal identification processing unit 15 Basic information registration unit 16 Application acceptance unit 17 Valid time setting unit 18 Time output unit 19 Information provision unit 20 Intermediation processing unit 30, 50 Memory unit 32 Login information memory unit 33 Basic information memory unit 34 Personal identification information memory unit 35 Business information memory unit 41 Start processing unit 42 Service list output unit 43 Login input processing unit 45 Service application unit 46 Personal identification input processing unit 47 Basic information input processing unit 48 Procedure input processing unit 54a In-camera 54b Out-camera 55 Touch panel display 67a Time area 100 Service provision support system

Claims (9)

A service delivery support device communicably connected to a terminal and to one or more service provider devices that provide services to users of the terminal,
a validity time setting means for setting a validity time when identity verification is successful through identity verification processing performed between the terminal and the validity time setting means;
an information providing means for providing identity verification information used in the identity verification process to the business device of the one or more business entities within the validity period set by the validity period setting means;
A service provision support device comprising: 2. The service provision support device according to claim 1,
a service delivery support device comprising: an intermediary means for intermediating a process related to the service performed between the business operator device and the terminal within the range of the valid time set by the valid time setting means; 3. The service provision support device according to claim 1,
an application receiving means for receiving a selection relating to an application for one or more services from the terminal;
The information providing means provides the identity verification information used in the identity verification process to the business device of the one or more businesses related to the application for the one or more services accepted by the application accepting means, within the validity time range set by the validity time setting means. 4. The service provision support device according to claim 3,
The validity time setting means sets the validity time in accordance with a selection related to an application for the one or more services accepted by the application accepting means. 5. The service provision support device according to claim 1,
a time output unit that outputs information related to the valid time set by the valid time setting unit to the terminal; 6. The service provision support device according to claim 1,
a login authentication means for receiving login information from the terminal and performing authentication;
The information providing means provides the identity verification information used in the identity verification process to the business device within the validity period set by the validity period setting means only while the connection with the terminal is continued through authentication by the login authentication means. 7. The service provision support device according to claim 1,
A verification information receiving means for receiving, from the terminal, verification information including a document image obtained by photographing an identification document with a face photo and a face image obtained by photographing the face of the user;
an identity verification means for executing the identity verification process using the verification information received by the verification information receiving means;
A service provision support device comprising: 8. The service provision support device according to claim 7,
an image registration means for registering at least a face photo image of the document image and information obtained by processing by the identity verification means in a storage unit when identity verification is successful by the identity verification means;
a registration information matching means for matching, when the confirmation information receiving means receives only a facial image obtained by photographing the face of the user from the terminal, the facial image with the facial photograph image stored in the storage unit;
an identity authentication means for determining that identity verification has been completed when the registration information verification means has verified the identity of the person;
A service provision support device comprising: A computer that is a service provision support device that is communicably connected to a terminal and to one or more service provider devices that provide services to users of the terminal,
a validity time setting means for setting a validity time when identity verification is successful through identity verification processing performed between the terminal and the validity time setting means;
an information providing means for providing identity verification information used in the identity verification process to the business entity device of the one or more business entities within the validity period set by the validity period setting means;
A program to make it function as such.

Images